A Review of Capture the Flag (CTF) Platforms for OT/ICS Security Training
摘要
Operational technology plays a vital role in managing and monitoring critical infrastructure by the help of industrial control systems (ICS). However, the interconnection of OT environments with enterprise networks exposes these systems to critical threats that could result in catastrophic damage and disrupt operational continuity. OT security is an emerging field within cybersecurity, however, due to its novelty, organizations face challenges in securing these systems due to the lack of skilled professionals and hands-on training platforms. Capture the Flag (CTF) platforms have proven to be useful for cybersecurity training. However, their applicability to OT/ICS-specific training remains limited. This paper reviews the existing literature on OT/ICS-focused cybersecurity education, security measures and CTF platforms. The analysis highlights a gap in the availability of realistic, permanent and scalable OT/ICS-focused CTF platforms. This paper emphasizes the need for developing specialized training solutions to better equip cybersecurity professionals with the practical skills required to protect critical industrial systems.